improvement(whitelabeling): gate the settings page on the whitelabel read's entitlement

[waleedlatif1]

Summary

• The whitelabeling settings page blocked on the full organization billing read (the member page plus every member's usage for the period) only to read the plan name, so it was the slowest settings section to open
• The whitelabel GET now also returns isEnterprise, which is the same entitlement check the update enforces. This matches how the session-policy and data-retention reads already work. The page gates on that field and makes no billing request, and the workspace branding provider usually has this read cached already
• The gate now matches what saving allows. The server page gate only checks the plan on hosted deployments, so with self-hosted billing a team-plan org previously saw the form and then got a 403 on save. It now sees the Enterprise-only message
• The change is additive, so it is safe across a deploy: isEnterprise sits beside data, not inside it. A client from before this field parses the same settings, so branding keeps its theme and the form never loads empty
• The Copilot settings tool still returns the flat settings object it returned before

Type of Change

• Improvement

Testing

• E2E against a production build with 80 ms network latency and billing enabled:
  • Enterprise org, sidebar navigation: the form renders in 138–167 ms, down from 240–360 ms, with 0 billing requests
  • Enterprise org, direct load: the form renders and the org theme is still injected
  • Team-plan org: the Enterprise-only message shows with no form, and PUT still returns 403
  • Old-client compat check: the previous response schema still parses the settings from the new response
• bun run lint, type-check, check:audits, docs-manifest:check, block registry check
• 52 test files (419 tests) across whitelabeling, organizations, settings, the Copilot settings tool and the organization routes

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 30, 2026 5:58am UTC

[cubic-dev-ai]

No issues found across 8 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[High risk] Changes the whitelabel settings API contract and access control.

The PR appears safe to merge; no outstanding findings remain.

Summary

The whitelabel read now returns the save-time entitlement alongside unchanged settings data, allowing the settings page to gate without a billing request. Branding and the Copilot settings tool retain their settings-only behavior. The latest change makes the new client accept responses from older servers that omit the entitlement.

_{Reviews (2) · Last reviewed commit: "fix(whitelabeling): parse the whitelabel..."}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 8 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}